WBA and FIDO test zero-touch Wi-Fi onboarding for IoT devices

The Wireless Broadband Alliance and FIDO Alliance say a new trial shows factory-provisioned IoT and edge devices can connect automatically to OpenRoaming and begin secure ownership transfer without manual setup. The result could cut deployment costs and simplify large-scale device rollouts across enterprise, industrial and private networks.

Why it matters: - Large IoT deployments often need manual setup across multiple sites, networks and administrative domains. - The trial points to a standards-based path that could reduce deployment costs, credential handling and configuration complexity. - The model also keeps enterprise control over where devices ultimately connect.

What happened: - The Wireless Broadband Alliance published the OpenRoaming® For IoT Trials Report with the FIDO Alliance on September 22, 2026. - The report says OpenRoaming, Passpoint® and FIDO Device Onboard can give IoT and edge devices secure connectivity at first power-on. - The setup lets devices begin ownership transfer and receive the credentials and configuration needed for their operating environment without manual Wi-Fi setup. - The proof of concept was implemented by VinCSS using a Linux-based Raspberry Pi as the test device.

The details: - Manufacturers can provision devices with cryptographically bound credentials before shipment. - When a device powers on within range of an OpenRoaming-enabled network, it authenticates automatically and reaches onboarding services. - OpenRoaming provides the secure bootstrap connection, while FIDO Device Onboard handles device identity, ownership transfer and delivery of network credentials, policies and application configuration. - The model separates initial access from final network placement, allowing devices to move later to enterprise, industrial, private or other operational networks. - The trial validated the first phase of the “End-user and Device Onboarding Flow.” - Private keys were stored in a secure hardware element and were never exported. - At first power-on, the device connected automatically to an available OpenRoaming network and initiated the FDO TO1 and TO2 ownership-transfer workflow. - The trial validated the initial FDO provisioning stage of the WBA OpenRoaming for IoT Model. - The report says the approach can also support redeployment, letting devices be reassigned and securely onboarded into new environments. - The report identifies areas that need more work, including air-gapped or high-security networks, restricted network segments and resource-constrained IoT devices that cannot run FDO or a Passpoint supplicant directly. - For resource-constrained devices, the report explores a proxy model where a helper device could run the OpenRoaming and FDO protocols on their behalf. - Solutions for air-gapped applications are already in definition and are expected to appear in a future WBA-FDO applications report. - The report is available at the OpenRoaming for IoT Trials Report.

Between the lines: - The trial suggests the industry is trying to move IoT onboarding from manual provisioning to a repeatable trust framework built into manufacturing. - The separation between bootstrap access and final network control is designed to preserve local security policies while reducing onboarding friction. - The remaining gaps show the model is promising, but not yet universal across every deployment type.

What's next: - The WBA and FIDO Alliance are inviting device manufacturers, enterprises, operators, infrastructure providers and IoT solution developers to join the next phase. - Next priorities include multi-vendor trials, industry-specific proofs of concept, certificate lifecycle testing and further work on air-gapped and resource-constrained environments. - Tiago Rodrigues, president and CEO of the Wireless Broadband Alliance, said the effort is an important step in extending OpenRoaming into IoT and edge use cases. - Mark Grayson, Cisco Fellow at Cisco, said manual setup remains a major hurdle for businesses. - Richard Kerslake of the FIDO Alliance said enterprises do not have to choose between speed and security. - Dr. Necati Canpolat of Intel said the work points to a practical path toward automated onboarding across diverse network environments.

The bottom line: - The trial shows a credible route to zero-touch IoT onboarding that could make large deployments faster, safer and easier to scale.